$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json) Hash identifier: ZhgvD7he7CQZmtB72cYqRuWYtLgKpVD+XvTg/4zZvng= Subject key identifier: 64:E2:C3:89:8B:00:81:12:34:61:BB:2A:D1:D9:86:E7:A9:7E:8B:EA Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 Certificate issuer: /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft Manifest number: 40 Signing time: Mon 31 Aug 2026 08:57:31 +0000 Manifest this update: Mon 31 Aug 2026 08:57:30 +0000 Manifest next update: Mon 07 Sep 2026 08:57:30 +0000 Files and hashes: 1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: NgLPzLkWXtiHsAePlLLw1zznNUDrecQhSuwnhWftHpU=) 2: 63B4BE609F8611F1A5D39EA03E11F970.roa (hash: zTI2xjB+gANhRfGLJLeHP5dpBREsQqUAEA7gE6452u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 08:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790 Validity Not Before: Aug 31 08:57:30 2026 GMT Not After : Sep 7 08:57:30 2026 GMT Subject: CN=6a9541fb-ecc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:2e:d3:8d:f0:ab:4b:f1:5e:fd:69:42:71: a0:ca:ac:cf:8a:89:a4:ff:88:32:74:56:3d:81:83: 65:b7:a6:d2:c1:28:4d:6b:4f:2d:8c:d3:b7:92:74: 59:aa:ff:f9:67:9e:73:fa:61:9d:95:0d:da:46:f0: 29:fc:5a:d3:b2:0e:57:61:0a:ea:2d:a2:df:f7:c7: cb:22:eb:ad:17:ea:39:c7:3a:df:c7:fb:bc:b5:48: ac:3b:18:fc:f2:90:fc:d0:55:15:f1:b5:5b:9d:ea: 5d:60:5c:97:08:e1:36:a1:08:6d:bd:0d:c0:87:fd: 58:29:54:a8:f8:fc:7e:67:40:e4:0c:bc:74:e6:65: ec:7d:8f:70:00:e9:a0:54:0d:16:5a:ad:6e:b7:5a: 2e:f7:5a:ca:0d:18:c0:8c:f6:f1:c8:c1:39:a1:86: af:3d:bf:30:c3:d2:95:c2:3b:4a:15:8e:04:35:83: c4:62:3f:82:0a:cf:b6:ae:ce:c8:b0:30:0a:c9:ea: eb:d3:a6:07:b9:d9:fa:63:d7:54:33:9f:af:67:38: 02:b6:58:c3:26:1f:e6:4e:ec:38:26:cb:ac:fa:92: d5:3a:86:99:03:fd:74:88:37:cc:3b:c3:ab:cc:b6: 15:52:b6:09:89:2e:c6:55:f3:37:83:8b:3f:21:7e: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:C3:89:8B:00:81:12:34:61:BB:2A:D1:D9:86:E7:A9:7E:8B:EA X509v3 Authority Key Identifier: keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:04:a6:20:90:12:ca:27:d5:dd:4b:7a:44:11:1d:d8:5f:7d: eb:b1:d4:d9:2a:02:f3:47:04:22:d9:6e:55:8f:ae:ba:1f:5d: 29:ef:4f:7a:68:1b:8d:b5:b9:38:58:4b:d7:6f:2a:ae:f4:9e: 49:59:21:c6:e9:53:90:7f:98:ce:63:cb:bf:21:c3:4f:f0:a3: 73:bf:56:98:d9:48:8b:37:dc:0c:9c:0d:75:07:f2:9b:c8:6a: 4f:13:db:6c:c0:ae:8f:7b:9b:2a:40:69:f0:f8:88:13:03:b2: 84:e7:8b:d4:e5:dd:09:29:91:fc:9b:eb:de:91:4f:79:96:b1: 29:4e:4a:96:7e:83:94:0a:09:eb:5d:69:ad:aa:d0:43:de:ad: 70:dd:05:18:7d:45:d3:9e:fa:04:cf:c4:85:95:b4:d9:ce:f2: e4:b6:96:f6:c0:7c:ee:ab:6c:9b:d1:67:d7:04:e4:78:79:9c: 24:fe:a4:bd:25:85:f0:c6:e4:e3:29:41:af:4e:80:bc:ee:c6: bf:7e:77:45:c3:c2:87:06:6a:60:44:5b:64:7c:1e:0e:23:cc: d8:a0:3e:e2:1b:de:58:07:b3:e9:2d:1b:cd:5f:bc:40:31:85: dd:21:9f:51:8d:aa:77:58:63:da:39:a9:f8:82:68:94:2b:5f: 17:02:5c:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEI4OTExMC8GA1UEBRMoOTg2MTIwRTE5NDMxRTJDM0ZFOTk2NTAzQkU3MDA3MjIx MzU0OTc5MDAeFw0yNjA4MzEwODU3MzBaFw0yNjA5MDcwODU3MzBaMBgxFjAUBgNV BAMTDTZhOTU0MWZiLWVjYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUzi7TjfCrS/Fe/WlCcaDKrM+KiaT/iDJ0Vj2Bg2W3ptLBKE1rTy2M07eSdFmq //lnnnP6YZ2VDdpG8Cn8WtOyDldhCuotot/3x8si660X6jnHOt/H+7y1SKw7GPzy kPzQVRXxtVud6l1gXJcI4TahCG29DcCH/VgpVKj4/H5nQOQMvHTmZex9j3AA6aBU DRZarW63Wi73WsoNGMCM9vHIwTmhhq89vzDD0pXCO0oVjgQ1g8RiP4IKz7auzsiw MArJ6uvTpge52fpj11Qzn69nOAK2WMMmH+ZO7Dgmy6z6ktU6hpkD/XSIN8w7w6vM thVStgmJLsZV8zeDiz8hfk7DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZOLDiYsA gRI0Ybsq0dmG56l+i+owHwYDVR0jBBgwFoAUmGEg4ZQx4sP+mWUDvnAHIhNUl5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQjg5L0YyQjA5N0JBNDky ODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQLW1XVUR2bkFISWhOVWw1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUdFZzRaUXg0c1AtbVdVRHZuQUhJaE5VbDVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw Qjg5L0YyQjA5N0JBNDkyODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQ LW1XVUR2bkFISWhOVWw1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCBKYgkBLKJ9XdS3pEER3YX33rsdTZKgLzRwQi2W5Vj666H10p7096aBuNtbk4 WEvXbyqu9J5JWSHG6VOQf5jOY8u/IcNP8KNzv1aY2UiLN9wMnA11B/KbyGpPE9ts wK6Pe5sqQGnw+IgTA7KE54vU5d0JKZH8m+vekU95lrEpTkqWfoOUCgnrXWmtqtBD 3q1w3QUYfUXTnvoEz8SFlbTZzvLktpb2wHzuq2yb0WfXBOR4eZwk/qS9JYXwxuTj KUGvToC87sa/fndFw8KHBmpgRFtkfB4OI8zYoD7iG95YB7PpLRvNX7xAMYXdIZ9R jap3WGPaOan4gmiUK18XAlxb -----END CERTIFICATE-----Generated at Tue Sep 1 02:30:05 2026 by rpki-client